Choose the correct destination identity
- Open Review and approve for the prepared batch. If identities block access changes, open the identity decision area.
- Check the source identity's type, display name, email, and source key. The affected file/change counts explain the scope of the decision.
- Choose Map to a destination account, then search by name, email, or user principal name (UPN).
- Select the intended verified result. Check its account type and email/UPN; map a preserved group share to a destination group.
- Choose Save decisions and prepare again. Inspect the rebuilt access plan before approval.
When names look the same
Two directory objects can have the same display name. A member account and guest account can also refer to the same-looking person but have different object IDs. Confirm the actual account the recipient will use in the destination.
If a person appears more than once because the source contains distinct objects, use the source key and identity type to distinguish them. Do not merge unrelated identities based only on their names.
Other decisions
- For a source external person keeping the same email, use Keep access for the same external email when offered.
- For obsolete or unauthorized recipients, choose Do not restore this identity's access.
- If the intended internal user or group does not exist in the destination, have the tenant administrator create it before mapping. Guest preservation has a separate approved invitation flow.
- On the standalone Identity screen, Save identity decisions updates the selected mapping run; build a new restore plan afterward.